Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
File: WNKjVqVHgVW-qovGJWqG9tWz9zw.mft (raw, json)
Hash identifier: a+QLl2AZYnvxC5vkHimtvz035SS+qVGo269Z4fHaRso=
Subject key identifier: 40:44:38:F3:06:BA:DB:7E:CA:F6:3D:AD:13:33:C4:06:93:3B:39:DA
Authority key identifier: 58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
Certificate issuer: /CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Certificate serial: 0194BCE073676972D8CC979C4E03A407495D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: WNKjVqVHgVW-qovGJWqG9tWz9zw.crl (hash: jVz7QWgytU5+Y6cfdlI1KDsypy9BVta+WT9v1a2JG5M=)
2: g4DPD_TlI2jk4YtUIO3nppJCypo.roa (hash: 1cUob6Ttj1c9mZCdpqGoW3x2UVNqUiWBsqfqlcDpGkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:73:67:69:72:d8:cc:97:9c:4e:03:a4:07:49:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2a356a5478155beaa8bc6256a86f6d5b3f73c
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=404438f306badb7ecaf63dad1333c406933b39da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:9c:35:14:c3:32:11:53:18:81:3d:2a:c9:
1e:97:1b:1c:d2:19:37:26:2c:fd:07:3f:8a:72:8e:
c1:08:98:e3:40:4a:89:97:c2:e5:63:f6:1a:9e:a0:
5e:f6:76:48:ac:25:ec:c8:a2:3d:ce:30:73:2d:18:
21:a6:b5:c2:a7:fa:21:7d:f5:b0:91:95:fa:26:42:
c0:03:a1:77:a2:b0:80:e2:62:00:30:be:40:b2:f3:
c5:e8:d2:f3:38:90:6b:af:8b:3e:35:e3:33:c3:70:
ff:52:55:94:df:ce:63:f5:44:a0:ae:dd:78:c4:31:
e9:1c:c7:2a:96:f3:2f:7d:d3:cd:0c:fa:41:8b:59:
82:6b:f0:07:31:08:24:dd:0b:ba:13:d9:da:19:0f:
94:50:e6:26:e6:75:6b:43:ab:df:fd:e8:18:d6:23:
f3:ae:39:2d:19:e7:bd:db:47:50:8d:af:ba:69:01:
fa:b7:d6:c6:be:a2:b6:b2:60:b0:46:93:8d:bc:80:
f7:07:3d:36:96:4d:8d:a2:01:10:c8:76:2b:7d:99:
41:f8:5a:91:ca:a0:1f:54:97:8f:d0:ea:de:72:dc:
da:fd:89:cc:57:ec:ec:c6:7c:08:28:45:13:f6:6b:
6a:ed:6f:de:c3:da:80:ab:3e:16:a3:f2:e3:22:38:
40:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:44:38:F3:06:BA:DB:7E:CA:F6:3D:AD:13:33:C4:06:93:3B:39:DA
X509v3 Authority Key Identifier:
keyid:58:D2:A3:56:A5:47:81:55:BE:AA:8B:C6:25:6A:86:F6:D5:B3:F7:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNKjVqVHgVW-qovGJWqG9tWz9zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5afc2-b04c-446d-9a04-9053054a5cab/1/WNKjVqVHgVW-qovGJWqG9tWz9zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f6:3d:c2:ed:e0:0e:a7:b5:6a:3c:c3:3f:79:3b:9f:02:ac:
4b:f1:92:7a:7c:62:1d:7c:97:8d:a5:0b:5d:06:ef:d0:ab:94:
86:10:fe:ee:33:26:5c:ed:d1:04:2c:46:23:60:a8:67:23:4b:
df:a0:5f:53:af:dd:dd:3a:55:0a:92:9d:94:de:03:74:00:9f:
c9:7c:31:4b:9f:3a:cc:f6:6e:6a:ed:0a:a7:1d:e4:42:0c:6a:
30:ee:f7:9a:87:c2:55:7e:1a:01:41:58:e9:e1:00:f0:5c:cb:
6e:25:57:2e:83:11:d1:2c:17:c3:59:de:03:1b:27:66:bb:99:
a7:eb:1e:11:e0:48:2e:22:7f:48:ef:0d:91:0a:3e:52:66:ad:
c4:a5:a3:0f:c8:d2:34:05:e7:6d:1b:f6:61:ec:8b:3e:85:8b:
b4:dc:be:9b:d4:8f:df:81:f7:fb:f8:d3:e4:40:0d:b9:b6:f9:
15:e7:54:92:71:4b:7e:0f:75:6d:d9:08:09:c0:84:d4:b2:e9:
3a:5c:8e:5b:8c:14:2a:fe:b5:70:91:b7:b4:9d:25:48:ee:b0:
6b:c5:a8:fe:4d:37:d8:aa:1b:4d:60:70:77:5c:6b:9f:63:88:
82:34:77:d1:d9:d3:40:e2:2a:8d:2c:59:bc:a2:83:36:2b:6a:
79:ac:7e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:54 2025 by rpki-client